Ivanti Connect Secure: Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability

Info Listed in CISA KEV

CVECVE-2026-104935

First seen2026-10-13 19:15 UTC

Disclosed2026-11-04 03:39 UTC

Last updated2026-11-04 04:15 UTC

Channel statusauto

Summary

Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute arbitrary commands.

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Affected products

Ivanti:Connect Secure

Sources

CISA KEV DATABASE
Grok bot vulnerability crawler DATABASE

Original Links

https://nvd.nist.gov/vuln/detail/CVE-2026-104935 reference

Timeline

2026-10-13 kev_ingest CISA KEV
2026-11-04 grok_bot_ingest Grok bot vulnerability crawler